These Rules and Procedures are implemented pursuant to CIRA’s Privacy Policy, to provide the process for certain persons to request the disclosure, under certain limited and specified circumstances, of certain specific information of Registrants that is not publicly available through CIRA’s WHOIS search tool.

Except as expressly specified herein or in the Policy, any other request for disclosure of information of Registrants must be by way of an order, ruling, decision, subpoena, warrant, or judgment.

These Rules and Procedures outline:

What specific information of Registrants may be disclosed under these Rules and Procedures, pursuant to a request for disclosure;

Who may request such information be disclosed by CIRA, pursuant to these Rules and Procedures (“Requestors”); and

What express requirements the Requestors must meet, before CIRA will consider disclosure of information, pursuant to a request.

All capitalized terms used herein but not defined, shall have the meanings as set out in CIRA’s Registrant Agreement or Registrar Agreement.

Rules and Procedures

Information Subject to Disclosure.

These Rules and Procedures provide for the potential disclosure of the following information of Registrants, as found in the CIRA Registry:

The name of the Registrant;

The postal address and email address of the Registrant (if available);

The name of the Registrant’s Administrative Contact and Technical Contact; and

The postal address and email address of the Registrant’s Administrative Contact and Technical Contact;

(collectively, “Information”).

CIRA will not disclose any other information under these Rules and Procedures.

Who May Request Disclosure of Information. Law Enforcement Requestors must be a member of a Canadian law enforcement or national security agency that is a government institution or part of a government institution, who has identified its lawful authority to obtain the Information, and who complies with all of the obligations of Section 3 below.

Requirements. To be able to request Information, a Requestor must meet all of the following requirements:

The Law Enforcement Requestor must require the Information for the purpose of either:

i. Enforcing a Child Exploitation Law of Canada (as defined in Schedule A hereto) or carrying out an investigation relating to the enforcement of such Child Exploitation Law. For purposes of these Rules and Procedures, “Child Exploitation Law” has the meaning set forth in Schedule A hereto;

or

ii. Investigating:

(a) an Espionage or Sabotage Threat; or

(b) a Terrorist Threat, as defined in Schedule “A” attached hereto

or

iii. Investigating an actual, or serious and imminent, threat to the stability or integrity of the Internet, resulting from:

The Law Enforcement Requestor must be requesting the Information for the sole purpose of the Law Enforcement Matter, and the Information, if provided, may not be used (in whole or in part) for any other reason.

The request for the Information of the Registrant must be in the applicable form as specified by CIRA from time to time. The form must be: (i) accurately and fully completed; (ii) signed by the Law Enforcement Requestor or their appointed representative, certifying full compliance with the requirements of these Rules and Procedures and that the information in the form is truthful and correct; and (iii) the original sent by postal mail, courier, email, facsimile or delivered in person to the address specified below:

CIRA Response. CIRA will respond to the request as quickly as possible after receipt of a form. CIRA reserves the right not to respond to a request, or to refuse a request where the Requestor did not, or CIRA believes may not, fully comply with all of the requirements of these Rules and Procedures.

Notice to Registrant. If CIRA approves a request hereunder, CIRA shall, unless prohibited by law, not less than 30 and not more than 60 days after disclosure of the Information, use reasonable efforts to send an email to the Administrative Contact of the Registrant indicating: (a) that CIRA has disclosed the Information; and (b) the name of the Requestor to whom CIRA has disclosed the Information.

Schedule A
Definitions

For purposes of these Rules and Procedures:

“Child Exploitation Law” means the following offences in the Criminal Code:

in each case where the victim of such offence is a person under 18.

Those offences that are listed in the definition of "designated offence" in s. 490.011; and

“Denial of Service Attack” means an attempt to make an Internet site or Internet service unavailable to its intended users by overwhelming that site or service with service requests, and includes a distributed denial-of-service attack (DDoS attack).

“Espionage or Sabotage Threat” means espionage or sabotage that is against Canada or is detrimental to the interests of Canada or activities directed toward or in support of such espionage or sabotage.

“Malicious Hacking” means the intentional and unauthorized access to a computer system.

“Phishing” means an attempt to acquire sensitive information (such as usernames, passwords, and credit card details) by masquerading as a trustworthy entity in an electronic communication.

“Pharming” means an attempt to redirect an Internet site or Internet service to a fake site or service without the end user's knowledge.

“Terrorist Threat” means activities within or relating to Canada directed toward or in support of the threat or use of acts of serious violence against persons or property for the purpose of achieving a political, religious or ideological objective within Canada or a foreign state.

Connect with us!

Domains registered:
2,813,016

By accessing and using CIRA's website you agree that you have read, understood, and consent to the terms and conditions for the use of CIRA's website, as set out in the Website Terms of Use and Privacy Policy.